<%@ page import="java.io.*, java.text.*, java.util.Date, java.sql.*, javax.servlet.*, javax.servlet.http.*, java.util.*" %>
<%
String usernameSC = (String) session.getAttribute("admin");
if(usernameSC == null)
    usernameSC = (String) session.getAttribute("ProfID");

if(usernameSC != null)
{
	String contentType= request.getContentType();
	String FolderName = usernameSC;
	String FileName = null;
	String imageName = null;
	
	if ((contentType != null) && (contentType.indexOf ("multipart/form-data") >= 0)) {
		DataInputStream in = new DataInputStream (request.getInputStream ());
		int formDataLength = request.getContentLength ();
		byte dataBytes[] = new byte[formDataLength];
		int byteRead = 0;
		int totalBytesRead = 0;
			
		while (totalBytesRead < formDataLength) {
			byteRead = in.read (dataBytes, totalBytesRead, formDataLength);
			totalBytesRead += byteRead;
		}
		String file = new String (dataBytes);
		String saveFile = file.substring (file.indexOf ("filename=\"") + 10);		
		saveFile = saveFile.substring (0, saveFile.indexOf ("\n"));	
		saveFile = saveFile.substring (saveFile.lastIndexOf ("\\") + 1,saveFile.indexOf ("\""));
		if(saveFile.length() < 2)
		{
			response.sendRedirect("upload.jsp");
			return;
		}
	
		int lastIndex = contentType.lastIndexOf ("=");
		String boundary = contentType.substring (lastIndex + 1,contentType.length ());
	
		int pos;
		pos = file.indexOf ("filename=\"");
		pos = file.indexOf ("\n", pos) + 1;
		pos = file.indexOf ("\n", pos) + 1;
		pos = file.indexOf ("\n", pos) + 1;
		int boundaryLocation = file.indexOf (boundary, pos) - 4;
		int startPos = ((file.substring (0, pos)).getBytes ()).length;
		int endPos = ((file.substring (0, boundaryLocation)).getBytes ()).length;
		String[] fileName = saveFile.split ("\\.");
		String file_extension = fileName[1];
		FileName = "C:\\Upload\\" + FolderName;
		new File(FileName).mkdir();
		imageName = saveFile;
		saveFile = FileName+"\\"+saveFile;
			
		FileOutputStream fileOut = new FileOutputStream (saveFile);
		fileOut.write (dataBytes, startPos, (endPos - startPos));		
		fileOut.flush ();
		fileOut.close ();
		out.print("<script language='javascript'> opener.document.getElementById('txta').value += ' <center><img src=http://localhost:8080/"+FolderName+"/"+imageName+"></center>'; window.close();</script>");
	}
	
}
else
	out.print("<script language='javascript'>alert('you are not authorized to upload file'); window.close();</script>");
%>
